Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
File: XWMX9pNua1eLOMPfsZgCVJj8rqE.mft (raw, json)
Hash identifier: sWS9Kx0w+03F5KSi5h/rtcRSqRMhxpv/hm1IgQcg/KE=
Subject key identifier: 8E:0D:8E:7C:FD:3B:C1:C0:41:B2:92:54:E2:36:59:BD:0C:F8:09:40
Authority key identifier: 5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
Certificate issuer: /CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Certificate serial: 019D25BA645EB2FE25546149D7CC5873F70D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
Manifest number: 07D6
Signing time: Wed 25 Mar 2026 16:01:05 +0000
Manifest this update: Wed 25 Mar 2026 16:01:05 +0000
Manifest next update: Thu 26 Mar 2026 16:01:05 +0000
Files and hashes: 1: XWMX9pNua1eLOMPfsZgCVJj8rqE.crl (hash: g6UCckcFoGd+n/JE7u2gfteF7HRCLE191tizy4GLjBM=)
2: ap-hePAObGM0xD9pl1yT2LqZzQg.roa (hash: mxBd1kBKjM1E0LiaQSAHHf7cP2igd3O8Gy2yRTKiPCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:64:5e:b2:fe:25:54:61:49:d7:cc:58:73:f7:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d6317f6936e6b578b38c3dfb198025498fcaea1
Validity
Not Before: Mar 25 16:01:05 2026 GMT
Not After : Mar 26 16:01:05 2026 GMT
Subject: CN=8e0d8e7cfd3bc1c041b29254e23659bd0cf80940
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6e:59:7d:8d:a4:6e:d6:67:09:43:62:ba:8c:
04:6d:98:e5:0b:08:b2:6e:d6:ad:93:f9:2c:6d:27:
24:d7:ef:ee:6d:ba:19:a9:c2:18:1f:3f:09:20:fc:
fc:49:d7:28:07:6d:fa:7f:03:92:d6:e6:e9:82:d2:
0b:21:f0:82:8e:98:dd:cc:bc:56:a7:4e:22:6a:ef:
53:b0:b0:02:44:e7:e6:59:d3:78:51:c7:30:b0:1a:
bb:13:28:2e:c7:3b:c4:e6:5e:b3:28:63:89:3a:93:
4b:46:b1:e5:53:97:99:bb:06:09:48:25:e6:2a:5f:
11:d8:94:d8:66:15:68:3e:fe:60:b2:e6:41:ac:a1:
2a:55:9f:dc:84:c6:b4:48:57:23:24:4c:98:93:43:
ca:d9:9a:b6:74:f8:bf:a2:e2:59:1e:2a:18:dd:99:
49:4d:23:34:e6:3e:04:63:25:15:cc:49:9e:c0:2c:
8d:15:1d:52:b1:ec:36:55:07:84:b0:26:b6:10:f2:
05:a7:b6:31:58:b5:6a:96:e9:04:d6:96:90:b6:a2:
db:80:28:cc:78:b6:8b:9f:23:57:be:0a:26:c1:a3:
d6:3c:fd:a7:dc:7e:45:ee:b4:13:6c:6a:14:d7:d0:
cf:6a:aa:77:cc:79:06:91:c2:35:28:6d:22:4d:63:
74:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:0D:8E:7C:FD:3B:C1:C0:41:B2:92:54:E2:36:59:BD:0C:F8:09:40
X509v3 Authority Key Identifier:
keyid:5D:63:17:F6:93:6E:6B:57:8B:38:C3:DF:B1:98:02:54:98:FC:AE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XWMX9pNua1eLOMPfsZgCVJj8rqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/03490c-ea47-402a-8bb0-d5658d0f3292/1/XWMX9pNua1eLOMPfsZgCVJj8rqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:b2:78:ca:aa:18:7c:ff:cd:d9:d5:48:5d:7f:6f:a1:ab:a5:
40:cc:29:ba:72:85:9a:51:6c:54:30:cd:20:63:83:96:6b:70:
2b:b9:4a:6f:77:64:73:1f:8c:c1:3b:10:3a:fa:f2:fd:c5:44:
69:2b:c4:c4:ec:3b:e5:92:38:ac:58:94:81:dd:29:d2:2e:38:
1d:4b:fa:96:55:0f:48:9d:e2:9a:af:60:db:b8:bf:d0:3e:14:
d5:3f:14:f7:21:13:bd:14:d3:49:9e:5d:f3:b5:8a:31:24:33:
9b:6c:78:e4:a7:ae:82:72:02:95:e0:2a:4d:f1:08:19:15:c3:
59:7c:28:3b:55:4b:16:de:ac:d5:22:61:3b:10:68:ad:f5:5d:
d3:0f:33:54:04:d9:a9:d3:0d:bc:d2:2e:f2:82:50:17:f1:da:
9a:fa:66:5f:fb:f9:62:dd:ca:7e:3a:c6:4c:bb:28:6a:36:fc:
20:8f:ea:01:9b:c0:d9:84:6d:4e:38:38:c9:9f:2e:39:28:4c:
a8:a6:f5:18:cb:78:e2:e4:02:5e:12:3f:e1:b6:6e:99:16:23:
82:f8:63:a1:a5:da:a1:69:bb:d5:a4:15:ab:c5:81:72:4a:22:
1f:59:db:43:68:c9:37:63:67:90:ce:64:50:0e:e4:af:08:fe:
71:c9:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:37:56 2026 by rpki-client